Senior Cyber Security GRC Consultant

Leidos; Canberra; Hybrid; AUD 172,000 - 215,000; Full time

Benefits offered by this job

Family friendly workplace

Job summary

Leidos Australia is seeking a Senior Cyber GRC Consultant to lead governance, risk, and compliance within a complex cybersecurity program. You will support regulatory alignment and drive maturity across the CP Environment in a hybrid Canberra/Brisbane setting.

You will mentor colleagues, advocate for automation, and deliver executive-level reporting on GRC metrics while collaborating with senior leadership on strategic improvements.

Qualifications

• Senior level experience leading GRC in Defence or similarly regulated Government environments.
• Strong understanding of cybersecurity standards, regulations, and risk frameworks.
• Excellent written and verbal communication and executive reporting.
• Certifications such as CISSP, CISA, CISM, CRISC, CGEIT, ISO 27001 Lead Implementer/Auditor, or IRAP.

Responsibilities

• Support governance, risk, and compliance domains within the cybersecurity program for CP Environment.
• Ensure enterprise-wide compliance with regulatory requirements and internal policies.
• Develop security assessment documentation for system authorisations and risk remediation.
• Provide training and dashboards to leadership and working groups.

Skills

Cyber GRC

Governance

Risk Management

Compliance

Executive reporting

Education

CISSP

CISA

CISM

CRISC

CGEIT

ISO 27001 Lead Implementer/Auditor

IRAP

Job description

Description

Senior Cyber GRC Consultant

• Lead meaningful security work that directly supports Defence andcriticalGovernment projects

• Drive governance, risk and compliance maturity, mentor others andprovideguidancewithin a complex and strategically important environment.

• Location Flexible: Canberra or Brisbane based, hybrid working

This role does require the successful applicant to be an Australian Citizen and hold a NV-1 level security clearance and able to uplift andmaintainNV-2.

We’rea ‘Family Friendly’ certified workplace – we understand the often many and varied roles our team members need to play within their own unique family setting and actively support them.

Our team feel Leidos isa great placeto work. Learn more about our culture and benefits by visiting us here

Do Work That Matters

Leidos Australia delivers IT and airborne solutions that protect and advance the Australian way of life. Our 2000 local experts, backed by our global experience and network of partners, are working to solve the world’s toughest challenges in government, intelligence, defence, aviation, borderprotectionand health markets.

Your New Role and Responsibilities

Within Leidos Central Processing (CP) Security, theSeniorCyber Security GRC Consultant supports the governance, risk, and compliance domains within the cybersecurity program, supporting the CP Environment.

This roleis responsible forsupporting enterprise-wide efforts to ensure compliance with regulatory requirements, internal policies, and industry best practices. The role combines technical knowledge, strategic thinking, and regulatory awareness to mature the security posture and risk management capabilities of a complex strategic environment.

WhatYou’llBring to Make an Impact

• Develop, implement, andmaintaincybersecurity policies and standards aligned with frameworks (e.g., NIST CSF, ISO/IEC 27001, DSPF, ISM) and prepare security assessment documentation for system authorisations.

• Conduct and support risk assessments across systems and vendors, track remediation efforts, and coordinate audits to ensure compliance with regulatory and internal requirements.

• Review and assess third-party vendors for security risks, provide mitigation strategies, and support due diligence processes.

• Deliver security awareness programs, develop targeted training, and report GRC metrics and KPIs through dashboards and documentation for leadership and working groups.

• Act as a trusted advisor, mentor junior team members, andidentifyopportunities for automation and strategic enhancements to mature the GRC function.

About You and What You'll Bring

• Ideally, you will have 7–10 years of proven Cyber GRC experience; however, candidates with around five years of direct,hands-onexperience in Defence or similarly regulated Government System Assessment and documentation activities may behighly regardedas strongapplicants.”onexperience in Defence or similarly regulated Government System Assessment and documentation activities may be

• Strong understanding of cybersecurity standards, regulations, and risk frameworks, plus experience in Defence environments and the Cyber Security Assessment and Authorisation Framework.

• Excellent written and verbal communication (including executive-level reporting), strong analytical and problem-solving skills, and ability to work independently to deliver outcomes.

• Certifications such as CISSP, CISA, CISM, CRISC, CGEIT, ISO 27001 Lead Implementer/Auditor, or IRAP highlyregarded;experience in regulated sectors (Defence, finance, healthcare, energy, government) desirable.

• Strategic thinking, risk-based decision-making, project management capability, regulatory acumen, and technical understanding of cybersecurity controls.

Diverse Team Members, SharedValuesand a Common Purpose

Providing our customers with smarter solutions takes an incredible team with diversity of thought, experience and perspectives driving innovation. Inclusion is at the heart of our culture and is one of our core values.It'sabout creating a workplace where everyone can do important work, feels welcome, valued, and respected, and has equal access to opportunities to thrive. Paul Chase – Chief Executive, Leidos Australia.

Leidos Australia is an equal opportunities organisation and is committed to creating a truly inclusive workplace. We welcome and encourage applications from Aboriginal and Torres Strait Islanders, culturally and linguistically diverse people, people with disabilities, veterans, neurodiverse people, and people of all genders, sexualities, and age groups.

Our five Advocacy Groups (Women and Allies Network,Young Professionals, Defence & Emergency Services, Action for Accessibility and Abilities and Pride+)provide an opportunity for team membersto connect and collaborate on shared interests, and work to support and celebrate our diverse community.

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 and moving faster than anyone else dares.

Pay Range:

$172,000.00-$215,000.00

The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.